aws

Supported platform

• aws

Description

AWS resource

Use the aws resource to assess the configuration of AWS accounts. It features the aws.regions field, which returns a list of enabled AWS regions in the account, and the aws.vpcs field, which provides a list of VPCs configured within the account.

Fields

ID	TYPE	DESCRIPTION
vpcs	[]aws.vpc	List of aws.vpc objects representing all VPCs in the account across all enabled regions
regions	[]string	List of all enabled regions in the account

Examples

List all enabled regions within the AWS account

aws.regions

List of aws.vpc resources for all VPCs across all enabled regions

aws.vpcs

List of aws.vpc resources for all VPCs across all enabled regions and the values for specified fields

aws.vpcs {
  arn
  id
  state
  isDefault
  region
  flowLogs
  routeTables
}

Ensure VPC flow logging is enabled in all VPCs

aws.vpcs.all( flowLogs.any(status == "ACTIVE") )

References

• AWS Documentation: Managing AWS Regions
• AWS Documentation: Security in Amazon Virtual Private Cloud